[Lighttpd] Config lighttpd support SSL

Test on FreeBSD 7.2
lighttpd-1.4.22 (ssl) - a light and fast webserver
Build-Date: Apr 18 2009 13:02:03

1. Generate key
#mkdir /etc/ssl/private
#cd /etc/ssl/private/
#openssl req -new -x509 -keyout lighttpd.pem -out lighttpd.pem -days 365 -nodes

2. vi /usr/local/etc/lighttpd.conf
# Uncomment mod_redirect in server.modules.

$SERVER["socket"] == "0.0.0.0:443" {
#### SSL engine
ssl.engine = "enable"
ssl.pemfile = "/etc/ssl/private/lighttpd.pem"
}
else $HTTP["host"] =~ "(.*)" {
url.redirect = ( "^/(.*)" => "https://%1/$1" )
}


3. Start lighttpd
#/usr/local/etc/rc.d/lighttpd restart

[Linux] เพิ่มความสามารถให้ squid cache video ได้

This summary is not available. Please click here to view the post.

[FreeBSD] ลงโปรแกรม netatalk เอาไว้ share ให้ mac

# pkg_add -r netatalk

# vi /usr/local/etc/pam.d/netatalk

###

netatalk auth required pam_unix.so try_first_pass

netatalk account required pam_unix.so try_first_pass

netatalk session required pam_permit.so

###

vi /etc/rc.conf

netatalk_enable="YES"

atalkd_enable="NO"

papd_enable="NO"

cnid_metad_enable="NO"

afpd_enable="YES"

timelord_enable="NO"

#---- start service

#/usr/local/etc/rc.d/netatalk start

จากนั้นก็ใช้ mac ทำการ connect โดยเปิด finder-> Go -> Connect to server ,

Server address: afp://username@192.168.1.1 --> Connect

[Dynamips] script สำหรับ start process dynamips

vi dynamips.sh

#!/usr/local/bin/bash
# Script for start dynamips process

DYNAMIPS_BIN=/usr/local/bin/dynamips
WORKDIR=/dynamips/cache
PORT_START=3600
NUM_PROC=12

case "$1" in
start)
cd $WORKDIR
i=0
while [ $i -ne $NUM_PROC ]
do
(( PORT = $PORT_START + $i ))
echo "Start dynamips hypervisor port $PORT "
nice $DYNAMIPS_BIN -H $PORT -l /dev/null > /dev/null 2>&1 &
(( i = i + 1 ))
done
exit 0
;;
stop)
echo "Stop dynamips all process .."
pkill -9 dynamips
;;
restart)
$0 stop
$0 start
;;
*)
echo "Usage: `basename $0` {start|stop|restart}" >&2
exit 64
;;
esac

[FreeBSD] Create RamDisk on FreeBSD

vi mkramdisk.sh

#!/bin/sh
MOUNT_DIR="/dynamips/cache"
SIZE=512M

case "$1" in
start)
/sbin/mdmfs -S -s $SIZE md0 $MOUNT_DIR
echo "$SIZE ramdisk created on /dev/md0 and mounted on $MOUNT_DIR"
exit 0
;;
stop)
/sbin/umount $MOUNT_DIR
/sbin/mdconfig -d -u 0
echo "ramdisk unmounted from $MOUNT_DIR and deleted from /dev/md0"
;;
restart)
$0 stop
$0 start
;;
*)
echo "Usage: `basename $0` {start|stop|restart}" >&2
exit 64
;;
esac

[FreeBSD] Example /etc/pf.conf

vi /etc/rc.conf
pf_enable="YES" <== enable pf

vi /etc/pf.conf
## Macros
SYN_ONLY="S/FSRA"
EXT_NIC="bge0"
INT_NIC="bge1"

ALLOWED_ICMP="echoreq"
ALLOWED_TCP="{ 22,80 }"
TRUSTED_IP="{ 10.0.0.0/24, 1.1.1.1 }"

# Your Internet IP goes in the EXT_IP variable
EXT_IP="1.2.3.4"

# Your private network IP goes in the INT_IP variable
# if you have two NICs on the machine
INT_IP="192.168.1.1"

## TABLES


## GLOBAL OPTIONS
set block-policy drop

## TRAFFIC NORMALIZATION


## QUEUEING RULES


## TRANSLATION RULES (NAT)


## FILTER RULES

# Block everything (inbound AND outbound on ALL interfaces) by default (catch-all)
block all

# Default TCP policy
block return-rst in log on $EXT_NIC proto TCP all
pass in log quick on $EXT_NIC proto TCP from any to $EXT_IP port $ALLOWED_TCP flags $SYN_ONLY keep state

# Default UDP policy
block in log on $EXT_NIC proto udp all
# It's rare to be hosting a service that requires UDP (unless you are hosting
# a dns server for example), so there typically won't be any entries here.

# Default ICMP policy
block in log on $EXT_NIC proto icmp all
pass in log quick on $EXT_NIC proto icmp from any to $EXT_IP icmp-type $ALLOWED_ICMP keep state

# Default IP Policy
block in log on $EXT_NIC all
pass in log quick on $EXT_NIC from $TRUSTED_IP to $EXT_IP keep state

block out on $EXT_NIC all
pass out quick on $EXT_NIC from $EXT_IP to any keep state

# Allow the local interface to talk unrestricted
pass in quick on lo0 all
pass out quick on lo0 all

ทำ 2D Barcode เอาไว้เล่นครับ

พอดีใช้ E71 มันสามารถสแกน 2D barcode ได้ครับ
h**p://qrcode.kaywa.com/

[Nokia] E71 ใช้ battery มากกว่าปกติเพราะ garmin xt

h**p://dotdoh.com/?p=394

If you have just installed Garmin Mobile XT version 5.0.0.20 on your Mobile Phone (So far only verified on my Nokia E71 running Symbian OS), you may have notice that your battery life for you mobile phone seems to have reduce substantially from about 2 days before the installation to about 1 day.

This it seem is due to a background process that Garmin Mobile XT starts upon boot up of your Symbian operating system as well as upon running of the Mobile XT software.

Things you will need to verify if you are affected by this background process.

1.) An installed version of Garmin Mobile XT (Duh….)

2.) JBak Task Manager. (You can download it from: http://jbak.ru/jbaktaskman_en.php)

Step 1	Start JBakTaskMan
Step 2	Select Menu >> Tools >> Processes
Step 3	Type TSRAutoStart.exe

If the process TSRAutoStart.exe is found, you are most likely affected by this background process wasting away your battery life.

How to kill the TSRAutostart?

Step 1	Follow the previous Step 1 – 3
Step 2	Select the process TSRAutoStart.exe
Step 3	Select Menu >> Terminate process

How to prevent TSRAutostart from auto loading upon boot up.

Step 1	Plug mobile phone to PC under Mass Storage mode (! important as directories used are otherwise hidden)
Step 2	Delete file CardRunner.RSC in directory under Mobile Phone\Resource\plugins\CardRunner.RSC
Step 3	Delete the file CardRunner.dll in directory under Mobile Phone\sys\bin\CardRunner.dll

Permanent Fix.

Well if you are seeking a permanent fix, you could always try downloading the latest version of Garmin Mobile XT (Link: http://www8.garmin.com/support/collection.jsp?product=010-11034-00).

As of version 5.0.0.40, this background process is now an option that can be switched off, saving you the trouble of killing the process each time you run Garmin.

Step 1	Start GMobileXT (Duh…)
Step 2	Goto Tools >> Settings >> System
Step 3	Scroll down all the way till you see the option “Launch background service”
Step 4	Select Disabled then Done to save

h**p://www.symbian-freak.com/forum/viewtopic.php?p=440972

After installing v5.0.0.x0:

Turn OFF your S60
Turn S60 back ON
Launch JBak Taskman to see if TSRAutoStart.exe is running in Memory in Menu -> Tools -> Processes even though it's set as DISABLED by default in Tools -> Settings -> System -> Launch Background Services.


If TSRAutoStart.exe is running after S60 is turned ON, do this:

START GarminMXT v5.0.0.x0, goto Tools -> Settings -> System -> Launch Background Services and change to ENABLED.
EXIT GarminMXT, re-start GarminMXT and goto Tools -> Settings -> System -> Launch Background Services and change to DISABLED
Turn OFF S60
Turn ON S60
Launch JBak TaskMan to check that TSRAutoStart.exe ISN'T in Menu -> Tools -> Processes

Now:

START GarminMXT v5.0.0.x0
EXIT GarminMXT
Launch JBak TaskMan to check that TSRAutoStart.exe ISN'T in Menu -> Tools -> Processes

Now, you should find:

TSRAutoStart.exe doesn't start when you first turn ON your S60
TSRAutoStart.exe now CLOSES automatically when you exit GarminMXT v5.0.0.x0
It appears that GarminMXT v5.0.0.x0 when being installed, doesn't create the DISABLED entry and has to be done manually by setting to ENABLE, then DISABLE.

[Nokia] E71 แสดง IMEI

พิมพ์ *#06#

[Nokia] E71 แสดง mac address ของ wireless

พิมพ์ *#62209526#

[Nokia] E71 Hard reset

พิมพ์ *#7370# แล้วป้อน unlock default code = 12345

[Linux] script สำหรับ check process แบบง่ายๆๆๆๆ

สืบเนื่องมาจากเปิด transmission-daemon ไว้แล้วมัน crash บ่อยเลยอยากให้มี script ไว้ตรวจสอบแล้ว restart อัติโนมัติ

$vi psmon.sh

#!/bin/sh

pid=`ps -ef|grep transmis|grep -v grep|awk '{print $2}'`

if [ -z "$pid" ]; then

echo "Process NOT running, Start process now!"

/etc/init.d/transmission-daemon restart

date >> /home/ubuntu/Ubuntu/psmon.log

else

echo "Process running"

fi

$chmod 755 psmon.sh

แล้วเรียก script ใน crontab ทุกๆ 5 นาที

$crontab -e

*/5 * * * * /home/ubuntu/Ubuntu/psmon.sh

[Linux] ใช้ wireshark บน text mode

ผมติดการใช้งาน wireshark แต่พอดีมาใช้บน linux แล้วเป็น text mode command line ใช้ tcpdump มันแสดงผลไม่สวยเห็น wireshark มีบน text เหมือนกันชื่อ tshark

install

$sudo apt-get install tshark

$sudo tshark -i eth0 -V -f "host 192.168.1.1"

ตัวอย่างมีการ capture interface eth0 โดยมี filter ที่มี src หรือ dst เป็น 192.168.1.1 แล้วแสดงผลเป็น tree คล้ายๆ GUI

[Cisco] QoS ทำการ marking ค่า DSCP แล้ว ไม่เห็นค่าที่ mark

Diagram

[SERVER]-----------[CAT1]---------------[CAT2]----------[CLIENT]

อุปกรณ์เป็น Cisco Catalyst6509 มีการ marking input packet จาก SERVER ที่ตัว CAT1 แล้วมาจับ packet ที่ client พบว่า packet ค่า dscp เป็น 0

เนื่องมาจากว่า catalyst6509 มีค่า default ในการ rewrite packet ToS->DSCP

โดยดูจาก command: show mls qos

QoS is enabled globally

QoS ip packet dscp rewrite enabled globally <---- by default

Input mode for GRE Tunnel is Pipe mode

Input mode for MPLS is Pipe mode

Vlan or Portchannel(Multi-Earl) policies supported: Yes

Egress policies supported: Yes

----- Module [5] -----

QoS global counters:

Total packets: 1795932

IP shortcut packets: 0

Packets dropped by policing: 0

IP packets with TOS changed by policing: 459413

IP packets with COS changed by policing: 57

Non-IP packets with COS changed by policing: 0

MPLS packets with EXP changed by policing: 0

จึงทำให้มีการ rewrite ค่าของ DSCP ที่เรา mark ไว้ตั้งแต่ CAT1 เป็นค่าที่ได้จากการ map ToS ค่าจึงเป็น 0 (พูดถึง default mapping จาก ToS->DSCP)

แต่ถ้าต้องการ disable ทำได้ 2 วิธีคือ

1. ตัว CAT2 ที่ global config mode

conf t

no mls qos rewrite ip dscp

!verify

sh mls qos

QoS is enabled globally

QoS ip packet dscp rewrite disabled globally <--- disable

Input mode for GRE Tunnel is Pipe mode

Input mode for MPLS is Pipe mode

Vlan or Portchannel(Multi-Earl) policies supported: Yes

Egress policies supported: Yes

----- Module [5] -----

QoS global counters:

Total packets: 3631461

IP shortcut packets: 0

Packets dropped by policing: 0

IP packets with TOS changed by policing: 550481

IP packets with COS changed by policing: 169

Non-IP packets with COS changed by policing: 0

MPLS packets with EXP changed by policing: 0

2. ตัว CAT2 ที่ interface ที่ต่อกับ CAT1

interface x/x

mls qos trust dscp

[Juniper] How to simulate JUNOS w/ FreeBSD & VirtualBox on MacBook or Linux

How to simulate JUNOS w/ FreeBSD & VirtualBox on MacBook or Linux

Requiements:

JUNOS: jinstall-8.5R1.4-domestic-signed.tgz

FreeBSD: 4.10-RELEASE-i386-miniinst.iso

VirtualBox

Socat (install via macports, apt-get) <-- By default olive disable standard output, only management with serial port console

Credit:

h**p://brokenpipes.blogspot.com

h**p://www.packetmischief.ca/juniper/olive/

h**p://spirit.sheridanc.on.ca/help/virtualbox/Network_Between_VirtualBox_Machines.html

1. VirtualBox

1.1 Create VM

Name JuniperOlive

Operating system: BSD

Version: FreeBSD

1.2 Memory size 256M

1.3 Create new harddisk

- Dynamic expanding storage

- Location

- Size 3G

1.4 Config detail

1.4.1 Audio disabled

1.4.2 Network

- Adapter 1

-Adapter type: Intel PRO/1000MT Desktop

-Attached to: NAT

- Adapter 2

-Adapter type: Intel PRO/1000MT Desktop

-Attached to: Internal Network

-Name: intf_R1_R2

- Adpater 3

-Adapter type: Intel PRO/1000MT Desktop

-Attached to: Internal Network

-Name: intf_R1_R3

1.5 Serial Ports

Enable ports 1

Port number: COM1

Port mode: Host Pipe

Check Create Pipe

Path: /tmp/olive1

2. Install FreeBSD

2.1 Boot freebsd cd

2.2 Skip kernel configuration

2.3 Choose standard install

2.4 Fdisk, Press A, then Q

2.5 select: install a standard MBR

2.6 Create partitions, Press C

/ FS 500M

SWAP 500M

/config FS 100M

/var FS

Finish press Q.

2.7 Choose Distributions = Exit

2.8 Install media CD/DVD

2.9 Config Ethernet: Yes

2.10 Network Interface

2.8.1 select em0 for DHCP, no ipv6

2.8.2 enter hostname: olive, then OK

2.8.3 select NO any requested

2.8.4 Set root password YES, Add user & group= Exit

2.11 Exit from install

2. Install JUNOS software

2.1 Boot freebsd and login with root

#cd /var/tmp

#ftp x.x.x.x <-- get junos software

get jinstall-8.5R1.4-domestic-signed.tgz

#mkdir jinst-signed

#cd jinst-signed

#tar xvfz ../jinstall-8.5R1.4-domestic-signed.tgz

#mkdir jinst

#cd jinst

#tar xvfz ../jinstall-8.3R1.4-domestic.tgz

#mkdir pkgtools

#cd pkgtools

#tar xvfz ../pkgtools.tgz

#cd bin

#cp /usr/bin/true checkpic

#cd ..

#tar zcvf ../pkgtools.tgz *

#cd ..

#rm -rf pkgtools

#tar zcvf /var/tmp/jinstall-8.3R1.4-domestic-signed-olive.tgz *

#rm /dev/wd0c && ln -s /dev/ad0c /dev/wd0c

#mkdir /var/etc

#touch /var/etc/master.passwd

#touch /var/etc/group

#touch /var/etc/inetd.conf

! install JUNOS

#pkg_add /var/tmp/jinstall-8.3R1.4-domestic-signed-olive.tgz

! reboot to continue

3. VirtualBox clone VDI for Backup & for R2 R3 ..

On MacBook

$ cd Library/VirtualBox/VDI/

$ VBoxManage clonehd JuniperOlive.vdi JuniperOlive_R1.vdi

VirtualBox Command Line Management Interface Version 2.2.2

(C) 2005-2009 Sun Microsystems, Inc.

All rights reserved.

0%...10%...20%...30%...40%...50%...60%...70%...80%...90%...100%

Clone hard disk created in format 'VDI'. UUID: 564eefe7-350f-42a3-bfd2-bb967d2f998e

3.1 New VM name JuniperOlive_R2, JuniperOlive_R3 and select harddisk from clone

3.2 Config VirtualBox JuniperOlive_R2, JuniperOlive_R3 details same JuniperOlive_R1

- Set Serial ports path different from R1, such as path: /tmp/olive2, /tmp/olive3

4. Start Olive

on macbook open new terminal

$socat -d -d /tmp/olive1 pty <-- Create new PTY. Example /dev/ttys001

$minicom -o -s <-- console and setup select port /dev/ttys001

5. Finish